A pharmacy fined for its “careless” handling of sensitive personal data has had the level of its penalty reduced on appeal after a tribunal accepted its claims that the scale of its breach of data protection laws was smaller than a UK regulator had determined.
https://www.pinsentmasons.com/out-law/news/pharmacys-uk-gdpr-fine-reduced-on-appeal